Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zEO1dBCTCPh0avYVLi7LIYqlmh8.roa
File: zEO1dBCTCPh0avYVLi7LIYqlmh8.roa (raw, json)
Hash identifier: w2i7t0fJFzoFl6za9JUxc/JHpwebfpc340M9KTq37oA=
Subject key identifier: CC:43:B5:74:10:93:08:F8:74:6A:F6:15:2E:2E:CB:21:8A:A5:9A:1F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01905006161AC065CC85E02530E9A33A1310
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zEO1dBCTCPh0avYVLi7LIYqlmh8.roa
Signing time: Tue 25 Jun 2024 15:31:34 +0000
ROA not before: Tue 25 Jun 2024 15:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215561
IP address blocks: 2a0a:79c0:200::/40 maxlen: 128
2a0a:79c7:f000::/38 maxlen: 128
2a0a:79c7:fe00::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 12 Jul 2024 11:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:06:16:1a:c0:65:cc:85:e0:25:30:e9:a3:3a:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jun 25 15:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc43b574109308f8746af6152e2ecb218aa59a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:31:55:00:67:59:31:75:4c:e4:69:7c:c7:
c3:8c:1e:30:03:44:73:aa:9f:13:c5:c3:46:c3:2f:
88:a1:f6:20:1f:ce:8b:7f:43:8f:8a:41:55:68:8b:
ee:21:01:01:e6:c8:76:41:06:ca:eb:0b:e0:7f:7b:
bf:5d:f5:8d:4c:22:4e:29:49:19:50:c8:4d:b0:46:
96:87:ed:7a:fe:70:73:a3:7e:c1:2d:4d:46:e8:16:
9d:c9:49:6d:b1:0f:69:08:3a:68:f5:fa:d8:08:d4:
b6:d0:4e:3a:59:ce:b4:24:5d:39:9c:83:66:b9:d3:
6f:eb:c9:be:e4:0d:ff:f1:f5:65:48:91:87:62:b3:
61:35:fb:2a:f5:69:0a:ee:51:1d:55:92:31:f4:c6:
16:2d:96:21:c2:d6:3a:03:17:72:2d:84:1d:5c:e3:
c1:57:fa:44:f0:af:ac:d5:9a:5f:14:a5:32:e3:5a:
30:59:07:78:6c:b8:f5:69:f4:65:2b:13:b3:f9:7a:
cb:ac:42:04:1f:c0:81:b0:76:f3:a0:6e:23:65:73:
bf:be:6d:9e:68:82:d5:09:75:13:8a:9d:e3:b2:56:
38:93:f9:50:37:c7:7e:2f:44:68:5a:ac:7e:73:7e:
91:19:c7:98:95:2f:be:1a:a5:ff:d2:5c:e0:29:7e:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:B5:74:10:93:08:F8:74:6A:F6:15:2E:2E:CB:21:8A:A5:9A:1F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zEO1dBCTCPh0avYVLi7LIYqlmh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:200::/40
2a0a:79c7:f000::/38
2a0a:79c7:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
2d:97:68:7c:4c:da:e2:5d:83:51:e9:8c:a6:05:32:8f:c8:a3:
11:aa:1a:f9:d6:22:8c:e1:30:41:75:df:06:b9:91:78:68:31:
b7:ee:53:ef:dd:71:4d:7d:77:88:c2:89:78:11:8b:88:42:3e:
76:54:a1:af:18:70:9f:f4:46:94:98:42:1b:5a:8f:5d:d3:40:
6a:18:b0:06:fe:f2:e4:8f:27:b0:14:38:24:5a:9e:52:f3:41:
fa:95:da:57:3d:8b:b6:60:2e:de:10:ac:f3:6e:a5:31:09:90:
e7:7d:92:5f:c0:3e:4e:9d:64:69:ed:48:06:61:a8:66:86:91:
30:8b:99:cc:32:92:cb:b0:e0:03:6f:c7:b0:55:5f:91:28:74:
a5:93:fd:1a:3f:27:4c:1c:29:45:7e:35:67:bc:cd:be:ad:ad:
47:35:56:17:43:e3:b2:b4:42:7e:61:38:17:07:d1:ae:83:71:
fa:3d:97:b6:30:39:fd:4f:24:81:d6:62:70:da:69:d6:a1:35:
c9:df:8b:44:df:be:4d:08:23:7d:8e:68:e0:88:28:9d:8c:d9:
0b:90:54:e9:be:d7:bc:93:1c:f8:1a:75:a7:b8:16:a3:37:90:
a7:47:c5:72:b5:63:40:8e:2a:e0:13:97:ea:58:55:43:77:03:
e3:ca:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 12:56:43 2024 by rpki-client on console-ams.rpki-client.org